Appendix A: Source Code 



The ANSI C source code for the functions f, g, d and h is given below, in which each 
function is implemented using a macro. In these definitions, a and b are 32-bit unsigned 
5 integers (or u int 3 2_t s, in POSIX terminology), and the function F is represented by the 
array F [256] of 32-bit unsigned integers. The macros ROT 8 and ROT 2 4 implement 
rotation by eight bits and twenty-four bits, respectively, where the direction of rotation is 
towards the most significant bit. 

10 #define ROT8 (x) ( ( (x) « 8) | ( (x) » 24)) 
#define ROT24(x) ( ( (x) « 24) | ( (x) » 8)) 

#define f (x, y, z, F) ( \ 

z += z, \ 

15 y = ROT24 (y) , \ 

x A = F[x & OxFF] , \ 

y A = F[y & OxFF] , \ 

y = ROT24 (y) , \ 

x = ROT8 (x) , \ 

20 x A = F[x & OxFF] , \ 

y A = F[y & OxFF] , \ 

x = ROT8(x) \ 



25 #define g(x, y, z, F) ( \ 



z += (z+1) , \ 

x = ~x; \ 

x = ROT24 (x) , \ 

x A = F[x & OxFF] , \ 



30 y A = F[y & OxFF] , \ 



x = ROT24 (x) , \ 

y = ROT8 (y) , \ 

x A = F[x & OxFF] , \ 

y A = F[y & OxFF] , \ 



35 y = ROT8(y) \ 



40 



#define d(x, y, z) ( 



x += z, 

y += x, 

x += y 



\ 
\ 
\ 
\ 



#define h(a, b) (a 



b) 
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The source code to produce the y'th word of output (that is, bytes 4/ through 4/+3) is given 
below, where j is represented by the variable leaf_num. 

5 uint32_t 

leviathan_output ( int leaf_num) { 
int i; 

uint32__t x, y, z; 

10 i = 1 « (LEVIATHAN_HEIGHT-1) ; 

x = y = 0; 
z = 1; 

{ 

{ 

F) ; /* right */ 
F) ; /* left */ 



Source code for an embodiment of a key setup routine follows. Here, key is a pointer to an 
unsigned character string of length bytes__in_key, and F is an array of TABLE_SIZE 
30 words. 

#define TABLE_SIZE 256 
#define NUM_PASSES 2 

35 void init_leviathan__key (const unsigned char *key, 

size_t bytes_in_key / word *F) { 
int i, j , k, index; 
word tmp; 

40 for (i=0; i<TABLE_S I ZE ; i++) 

F[i] - 0; 

/* 

* Each iteration of this loop we form the permutation of one line 
45 * (and, incidentally, also permute previously formed lines) 

-22- 

50325-0512 (Seq. No. 3245) 



15 



20 



while (i > 0 ) 
d(x, y, z); 
if (i & leaf) 

g(x, y, z, 
} else { 

f(x, y, z, 
} 

i »= 1; 



25 } 



return h (x, y) ; 



for (j=0; j<4; j++) { 
/* 

5 * Initialize the new line to the identity permutation, and 

* shift the existing lines over one 
*/ 

for (i=0; i<TABLE_SIZE; i++) 

F[i] = F[i] * TABLE_SIZE + i; 

10 

/* 

* Initialize index to a line-dependant value, so that the 

* four lines will get distinct permutations 
*/ 

15 index = j; 

/* 

* Do the byte-swapping NUM_PASSES times, using the new 

* line as the index 
20 */ 

for (k=0; k<NUM_P ASSES; k++) { 
for (i=0; i < TABLE_SIZE; i++) { 

index += (key[i % bytes_in_key] + F[i]); 
index &= (TABLE_SIZE-1 ) ; 
25 tmp = F [ i ] ; 

F [i] = F[ index] ; 
F[ index] = tmp; 

} 

} 

30 } 
/* 

* Finally, set SO equal to the xor of itself with the 

* identity permutation, so that (S0[x] A x) is a permutation. 
35 */ 

for (i=0; i < TABLE_SIZE; i++) 
F[i] A = i; 

} 

40 
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